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A locking protocol between two parties is as follows: Alice gives an encrypted classical 
message to Bob which she does not want Bob to be able to read until she gives him 
the key. If Alice is using classical resources, and she wants to approach unconditional 
security, then the key and the message must have comparable sizes. But if Alice prepares 
a quantum state, the size of the key can be comparatively negligible. This effect is called 
quantum locking. Entanglement does not play a role in this quantum advantage. We 
show that, in this scenario, the quantum discord quantifies the advantage of the quantum 
protocol over the corresponding classical one for any classical-quantum state. 

Keywords: Quantum discord, entanglement, quantum locking. 

1. Introduction 

The separation between classical and quantum correlations in a quantum system 
has puzzled physicists since the early days of quantum information science^—. The 
fact that unentangled or separable states can be created by local operations and 
classical communication— lead to the belief that all quantum correlations which 
are non-classical can be ascribed to entanglement. A bipartite quantum state is 
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separable or unentangled il it can written in the form 

Pab = J2pjPa ®Pb } ■ (!) 

3 

The subscripts A and B, or Alice and Bob, denote the two parties. In fact, all 
correlations of separable quantum states are local, i.e. can be explained by classical 
local-hidden- variable model&i. Nevertheless, Ollivier and Zurek gave a new measure 
of non-classical correlations according to which some separable quantum states 
can contain quantum correlations^ 3 -. For separable states, this comes simply from 
the possibility of choosing among different non-orthogonal local bases - a typical 
quantum feature - in the preparation and measurement. The measure proposed by 
Ollivier and Zurek to quantify these more general quantum correlations is called 
quantum discord-^. 

Quantum discord has received an astonishingly amount of interest recently— ~—, 
triggered mostly by the possibility of being the reason for the speedup of a quantum 
computation model 11 (called deterministic quantum computation with one qubit, 
or DQC1 for short 29 ). In the last years, quantum discord has been studied in 
several contexts like quantum computatio n 1 1 ' 1 2 , decoherence processes^—, local 
broadcasting—, open-quantum-system formalis m 17 ' 18 , and quantum phase transi- 
tions^^, just to cite some. Recently, more formal characterizations of quantum 
discord have been put forwar d 13 ' 21 ' 22 , and it has also been probed in the labora- 
tory— i^i. Finally, quantum discord can be related to the the difference between the 
efficiency of quantum and classical Maxwell's demon s 32 ' 33 and it has been given in- 
formation theoretical operational interpretations as the entanglement consumption 
in an extended quantum state merging protocol— and as the markup in the cost 
of quantum communication in the process of quantum state merging—. 

2. Quantum discord and accessible information 

We review now the definition of quantum discord. A good place to start is by 
reminding ourselves of the information theoretical classical measure of correlations 
for classical random variables. We associate temporarily to each party Alice and 
Bob a classical random variable, denoted A and B respectively. Then the amount 
of correlations in the classical probability distribution p(A, B) can be measured by 
the mutual information 

I{A- B) = D Kh (p(A, B) || P (A)p(B)) , (2) 

where p(A) and p(B) are the marginal distributions and -Dkl is the Kullback- 
Leibler divergence which measures the distance or relative entropy. That is, the 
mutual information is the distance to the corresponding uncorrelated probability 
distribution. An equivalent expression for the mutual information is found in terms 
of the (classical) conditional entropy, which itself has the expression 

H(A\B) = J2p(b)H(A\B = b) = H(A, B) - H{B) , (3) 

b 



I 



I 
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where H = — ~^2 b p(b) logp(fe) is the Shannon entropy. The (classical) conditional 
entropy is the expected value of the entropies of the conditional distribution. The 
mutual information gets the expression 

I(A; B) = H{A) - H{A\B) = H(A) + H{B) - H(A, B) , (4) 

The mutual information is then the reduction in the uncertainty of Alice random 
variable due to the knowledge of Bobs outcome^. 

Quantum states pab give rise to similar expressions when substituting each 
Shannon entropy H{A) by the von Neumann entropy S(pa) — —TrpA log Pa- In 
what follows we will use the notation S(A) = S(pa) and so for. The quantum 
mutual information is 

I(A; B) = S(A) - S(A\B) = S(A) + S(B) - S(A, B) , (5) 

which is also a measure of the total amount of quantum correlations. Indeed, the 
quantum mutual information is also the relative entropy between pab and pa® Pb- 
Operationally, it can be seen that it corresponds to the minimal rate of randomness 
that is required to completely erase all the correlations in pab^ ■ 

Consider now the following scenario, quite standard in a quantum communica- 
tion context: Alice produces classical (orthogonal) states \a)(a\ according to a prob- 
ability distribution {p a } and communicates with Bob through a quantum channel. 
Bob wants to know the value or "letter" a that Alice holds. If the transmission 
channel is perfect, Bob can reliably determine which |a) (a| was sent. However, if 
the channel used to transmit the states introduces errors, Bob will usually get mixed 
states ct^K In this scenario the final quantum state shared between Alice and Bob 
in the enlarged Hilbert space representation is a classical-quantum state, given by 

p cq = ^Tp a \a){a\A ® ^b 1 ■ ( 6 ) 

a 

Notice that, because Alice holds a classical system, there is no entanglement in- 
volved in this quantum effect. All classical-quantum states are of the form given by 
Eq. ©. 

Assume that Bob now measures his state to obtain information about Alice's 
letter. The maximum amount of classical correlations that Bob can obtain about 
Alice's letter in the previous scenario is quantified by the accessible information 
J acc ^l. This is defined as the maximum mutual information I(A; B) that he can 
extract from p cq by making a measurement Mb, i.e. 

hcc(pAB) = max. I (A; B) 

Mb 

= S(pa) -Tnm'Y]pbS(pA\b), (7) 

b 

where the state pA\b is the state of Alice given that Bob performs a measurement 
Mb = {Mb} in his subsystem and receives outcome 6, i.e. pA\b = ^B[Mbp]/pb- 
The probability of outcome b is given by pb = Tr [pMb]. Notice that the expected 
values of the entropies is the conditional information, in accordance with Eq. ([3]). 
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At this point, a natural way ol denning purely quantum correlations in a quan- 
tum state is to subtract the amount of classical correlations accessible to Bob from 
the total amount of correlations that the state contains. This is precisely how quan- 
tum discord is defined: the quantum discord of a bipartite quantum state pab is 

D(A~B)=I(A;B)-I ajCC (p AB ). (8) 

The corresponding general version of the accessible information (with the same 
definition, but Alice's state is not assumed classical) has been proposed as a mea- 
sure of classical correlations 4 . Quantum discord can also be defined for all quantum 
states with the same expression ([7]) 2:3 (not just classical-quantum states). Interest- 
ingly, part of the motivation of the original definition of quantum discord is that 
the quantum conditional entropy used in Eq. ([5]) can take negative values, whereas 
the average conditional entropy of Eq. (0 is always positive. Later the negative 
values of the quantum conditional information was given an operational interpre- 
tation in the quantum state merging protocol, and this plays a key role in the later 
operational interpretations of quantum discor d 34 ' 35 . 

3. Quantum locking of classical correlations 

Before stating our main result let us describe the idea of locking classical correla- 
tions in quantum systems. We first present the simplest example of this protocol, 
and calculate the quantum discord in this case. This will help gain intuition and un- 
derstand better the more general case that we will present later. We should remark 
that the connection between the quantum discord and quantum locking of classical 
correlations was suggested in Refs. 10 i 12 . Here we will prove that this connection is 
indeed valid for classical-quantum states. 

The protocol is now this: Alice wants to give a message a to Bob, but wants to 
keep it secret for the moment. She encrypts the message, and does not want Bob 
to able to read it until she gives him the key k. Think of the encrypted mission 
plans of a war movie. We are interested in unconditional security which, barring a 
security proof of a more practical encryption protocol, can only mean information 
theoretical security. 

Our aim is to minimize the size of the key. Continuing with the war time analogy, 
it is very expensive to secure a channel of communication to deliver the key after 
Bob departs, and every bit counts. How big must the key be if we are limited to 
using classical resources? Let m denote the number of bits of Alice's message. Bob 
must be able to read the message after receiving the key, and therefore the mutual 
information between the message and Bob's quantum state plus key must be m 

I(A\ B, K) = m, (9) 

where K is the random variable corresponding to the keys. Using the chain rule for 
conditional entropies 

m = I(A; B, K) = I (A; B) + I (A; K\B) . (10) 
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The conditional mutual information is denned as the mutual information but using 
conditional entropies, and the chain rule follows directly from this definition. If 
Alice wants to approach unconditional security then I (A; B) must be negligible. 
In addition, because at this point we are assuming that Alice and Bob are using 
classical resources 0, the conditional mutual information I(A;K\B) is bounded by 
the size of the key \K\. Therefore, the key must be almost as big as the message 
m ~ \K\. For example, in one-time pad a message of m bits is added to a random key 
of the same length, which hides the message in the (classical) correlations between 
the key and the message. 

The fact that for classical locking of correlations with almost unconditional 
security we must have m <~ \K\ is consistent with the following intuition: one 
should expect that by the transmission of I bits Alice and Bob cannot increase 
the correlations by more than I bits. In fact, this is basically the content of the 
principle of Information Causality, which can be used to explain the Tsirelson bound 
of the CHSH inequality 38 . This principle basically follows from the chain rule of 
conditional entropies, as in the derivation above. 

The chain rule is indeed obeyed by several measures of correlations, such as the 
quantum and classical mutual information. Surprisingly, DiVincenzo et al. showed 
that the accessible information 7 acc violates this rule^: some states have an arbi- 
trarily large amount of classical correlations unlocked after the exchange of some 
small amount (even one bit) of communication. This effect became known as quan- 
tum locking of classical correlations. In other words, the transmission of I bits results 
in a much larger increase of the accessible correlations. 

We can define the amount of extra correlations as 

A = I acc (A, K- B, K) - (I acc (A, K- B) + \K\). (11) 

This quantity can be interpreted as follows. The first term, I acc (A, K; B, K), is the 
maximum amount of correlations Bob can get if he waits for the communication 
of the key from Alice to make the measurement in his system. The second term, 
Iacc(A, K; B) + \K\, refers to the maximum amount of correlations that Bob can 
get if he measures before receiving the key. Thus, A can be thought as the amount 
of extra correlations that Bob can get if he waits for Alice's communication due to 
the quantum unlocking of classical correlations. 

a In fact, it is enough that the key is classical. To see this, we can first use the chain rule to write 

I(A; K\B) = I(AB; K) - I(B; K) . 

The term I(B; K) is positive by subadditivity. The first term, in the general (quantum) case is 

I(AB;K) = S(K) - S(K\B) < \K\ . 

The right hand size inequality follows because the conditional entropy is non-negative, given that 
there is no entanglement. 
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In the simplest case, the state considered by DiVincenzo et al. is: 

2"*-l 1 

pab = ^ tt SkfeXo.fcU®^!^^!^, (12) 

a=0 k=0 

being Uq = ]1 and U\ a unitary such that U\\a) is a mutually unbiased basis with 
respect to \a). The accessible information without the key I acc (A, K; B) is to/2 
bits^i, while the accessible information with the key I acc (A, K ; B , K) is rn + 1. 
The excess of accessible information A unlocked with the single bit k is to/2. The 
quantum mutual information I(A, K; B) is to. The difference between the quantum 
mutual information and the accessible information without the key, that is, the 
discord D(AB) of the initial stated, is also to/2 = A. Therefore, the discord of 
this state, without entanglement, describes the advantage for quantum locking, the 
difference between the optimal classical increment of shared information, and the 
one achievable in this protocol. There exist quantum locking protocols that have 
an arbitrary small amount of prior accessible information, and the rest is unlocked 
by a small key— ~— . 

4. Locking and discord of general classical-quantum states 

We have just shown that the quantum discord quantifies the amount of extra cor- 
relations that Alice and Bob gets if Bob waits until he gets some communication to 
perform a measurement, if they share the state (|12p . As we proceed to show now, 
the same interpretation is valid for more general classical-quantum states ([6]) . The 
only difference will be that, in general, Alice and Bob will have to share many copies 
to attain the quantities I q and J acc . In other words, we will work in the so-called 
asymptotic regime. 

Let us now show that for any locking protocol that, by design, works with a 
single copy— ~— , the amount of quantum locked correlations is always equal to 
its quantum discord. Note that, since after receiving the key the message a is 
completely revealed to Bob we must have 

h cc {A,K;B,K)=I q {A,K;B,K)=m+\K\. (13) 

On the other hand, 

I q (A,K;B,K) <I q (A,K:B) + \K\ <m+\K\. (14) 

As explained above, the first inequality comes from the fact that the quantum 
mutual information can not increase by more than the \K\ bits of information 
being transmitted, while the second is simply a bound on the correlations of the 
encrypted message \B\ — to. We thus conclude that 

I 3jCC (A,K;B,K) = I q (A,K;B,K)=I q (A,K;B) + \K\. (15) 

Finally, plugging it back in (fTTj) , we get 

A = I g (A,K;B)-I acc (A,K;B)=D(A~B) (16) 
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which is nothing but the quantum discord. 

For the general classical-quantum state we point out that asymptotically (in the 
limit of many copies), the discord of a CQ state is always equal to the advantage 
of quantum locking. This can be seen from the classical data compression with 
quantum side information result of Ref. 42, which builds upon the product classical 
information capacity of a noisy quantum channel (HSW)— We only give the 
intuition here and refer to Ref. 42 and references therein for the details. 

The intuition for the HSW result is the same as for Shannon's noisy channel 
coding theorem. Alice builds a quantum code by randomly choosing a subset of 
size 2 nR of strings of size n generated according to some distribution A. For each 
input letter a, Bob gets output = £(p a ), where p a is part of the quantum 
code construction. The rate of the code is R. Denote by a n a possible input of 
size n, and by ^ the corresponding output. The dimension of the subspace of 
typical sequences for the output of the channel on Bob's size goes like 2 nS{B \ In 
average, the dimension of the subspace corresponding to the conditional typical 
output sequences (taking into account the channel noise) goes like 2 nS ( B \ A \ That 
is, in average, the number of outputs for each input is 2 nS ( B \ A \ The size of the 
subset of inputs in the quantum code, given by the rate i?, must be such that 
we can identify the code word corresponding to the output, so we must assign a 
subspace of dimension 2 nS ^ A \ out of the total 2 nS ^ B \ for each code word. That 
is, the rate must obey 

2«fl. ^ 2 nS ( B ) j2 nS ( B \ A ) — 2 n ( s ( B )- s ( s l A )) 

= 2 nI ( A:B ^ . (17) 

This is the content of the HSW theorem: the product classical information capacity 
of a noisy quantum channel is given by the mutual information I (A; B). 

With this background, we can approach the content of Ref. 42. The question 
is, for a CQ state, how many quantum codes are necessary to cover the typical 
sequences of n copies? There are 2 nSt - A > typical sequences in Alice's side, and a 
quantum code, by the HSW theorem, has size 2 nIl * A > B \ so the number of necessary 
quantum codes is 2 n ^ s ^ A >^ I ^ A ' B ^> = 2 nS ^ B \ Then Alice sends only information 
identifying the quantum code, S(A\B) bits per copy of the CQ state, and Bob 
measures with that code, obtaining Alice's complete message. 

When Bob is forced to measure each copy of the output state before Alice 
sends the key, the amount of information unknown to Bob is quantified by Alice's 
entropy conditional on Bob's measurement outcome, that is, minM B ^2i,PbS(pA\b)- 
Because Bob measurement turns the quantum state into a classical random variable, 
the optimal choice of measurement for the accessible information also defines a 
corresponding classical protocol. The number of bits that Alice must send to Bob 
in this case is minM B ^2^PbS{pA\b)- We have seen that, using quantum codes, Alice 
must send only S(A\B) bits. The difference is the quantum advantage for quantum 
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locking, quantified by the discord D(AB) for CQ states 

D{AB) = I(A; B) - I &CC (A; B) = min V ft 5( M | t ) - S{A\B) . (18) 



5. Conclusions 

For a classical-quantum state, the difference between the accessible correlations and 
the quantum correlations gives a measure of purely quantum correlations, called 
quantum discord. This is despite the fact that the quantum state is separable and, 
therefore, admits a local hidden variable description. These purely quantum corre- 
lations are the source of the quantum advantage of a quantum locking protocol. In 
the simplest case, Alice encrypts her message in the choice of basis (as in the BB84 
cryptographic protocol—). If Alice then announces the choice of basis to Bob, he 
can perform a measurement which unambiguously identifies the encrypted message. 
For a general classical-quantum state, the state J also has the property of being 
decomposable into subensembles with mutually orthogonal elements in the asymp- 
totic limit. In both cases, quantum discord quantifies the quantum advantage. This 
also points towards a relation of discord to some quantum cryptography protocols. 
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